SETTLEMENT SERVICE METHOD USING A MOBILE TERMINAL, ESPECIALLY CONCERNED WITH SIMPLIFYING A USER AUTHENTICATION PROCEDURE USING A PUBLIC KEY INFRASTRUCTURE SECURITY TECHNIQUE

摘要

PURPOSE: A settlement service method using a mobile terminal is provided to reduce the cost and time required for random number transmission by installing a PKI(Public Key Infrastructure) security module in a user terminal and executing user authentication using a PKI security technique. CONSTITUTION: In case that a user selects desired contents to purchase(S101), a CP server transmits the user's purchase request to a settlement intermediary server together with user terminal information(S102). The settlement intermediary server requests the user terminal to input user information(S103). If the user's personal information is inputted to the user terminal, the user terminal executes digital signing for the user's resident registration number among the inputted user information(S104). The digital signature for the inputted personal information is completed, the user terminal transmits it to the settlement intermediary server. At this moment, the user's encoded resident registration number, the mobile identification number, and a personal certificate are transmitted together(S105). In case that the settlement intermediary server does not possess the certificate of a certificate authority which issued the personal certificate, the settlement intermediary server requests an authentication system to transmit the certificate authority's certificate(S106). Receiving the requested certificate from the authentication system, the settlement intermediary server verifies the personal certificate using the certificate authority's digital signature verification key contained in the received certificate(S107,S108).